Cybersecurity BS

In an era where digital trust underpins global economic stability and national security, the demand for elite protectors has never been more urgent. At RIT Croatia’s four-year undergraduate Cybersecurity program in Zagreb, you will gain the high-level expertise needed to preserve critical assets, identify hidden vulnerabilities, and design resilient strategies for data recovery.

 

800

working hours of co-op minimum 

2

degrees

Awarded to students graduating from undergraduate programs (US degree from RIT and European degree from RIT Croatia).

Overview

The scope and demand of computer systems and networks increase in organizations every day. At the same time, dependence on computing security technologies is growing dramatically, as is the creation of malicious software targeting these infrastructures. Cybersecurity is now a major concern for organizations to ensure the privacy of client information, business success, and smooth continuity in operations.

RIT Croatia's Cybersecurity program is built on the academic foundations of the globally recognized RIT program, ranked 18th in the United States (U.S. News & World Report, 2025). This four-year program in Zagreb prepares you to analyze, design, secure, and defend complex systems with a heavy focus on market relevance and practical application.

Why choose this program of study?

  • Global Prestige: Study a curriculum ranked among the top in the US and aligned with the European Cybersecurity Skills Framework (ECSF).
  • Hands-on Experience: Two mandatory semesters of professional internship (Co-ops) to apply your knowledge in real-world environments.
  • Specialized Expertise: Deep dives into cryptography, digital forensics, cloud security, and DevSecOps.
  • Elective Specializations: Tailor your studies through elective options in Technical Security, Digital Forensics & Offensive Operations or Application Security, Privacy & Governance.
  • Global Readiness: All courses are taught in English, preparing you for a career in private corporations, government agencies, or tech startups worldwide. In addition to improving your technical and business English, you will have the opportunity to learn an additional foreign language, choosing between German, Italian, Spanish, or French, further expanding your career opportunities and enhancing your competitiveness in the global job market.

Acquired Skill Set

Through a rigorous blend of technical training and interdisciplinary study, students develop the expertise necessary to defend complex digital ecosystems and lead in the rapidly evolving security landscape.

Core Skills & Competencies:

  • Asset Protection & Defense: Learn to protect digital assets, identify security vulnerabilities, and design robust data recovery strategies.
  • Technical Proficiency: Master professional-specific domains including cryptography, network and application security, and secure software development.
  • Offensive & Investigative Tactics: Gain expertise in penetration testing to simulate attacks and digital forensics to prove the existence of threats.
  • Risk & Incident Management: Develop skills in threat detection, risk management, and incident response across diverse sectors like healthcare, finance, and telecommunications.
  • Regulatory & Legal Awareness: Learn cyber law, compliance, and key EU cybersecurity frameworks, including the Network and Information Security Directive (NIS2), Critical Entities Resilience Directive (CER), the European Cybersecurity Skills Framework (ECSF), and the Cyber Resilience Act (CRA).
  • Strategic Design: Design secure solutions and systems while balancing technical requirements with business, legal, and ethical considerations.
  • Professional Collaboration: Collaborate on real-world projects, create comprehensive technical documentation, and present complex security topics to diverse audiences.
  • General Competencies: Cultivate essential transferable skills including critical thinking, complex problem-solving, ethical decision-making, and professional communication in English.

Choose a minor and expand knowledge about area of your interest

The American higher education system enables students to choose a minor. It is a related set of academic courses that enable students to expand their knowledge in a specific area; for example, you can choose an International Business minor and combine it with your Cybersecurity courses.  

The benefits of having a minor are multiple; from being visible on a university transcript to enabling a student to develop another area of professional expertise or personal interest and showcase depth in more than one discipline. 

Information about available minors for the Cybersecurity program will be available soon.

Connect with us

Inquire for more information Apply now

Careers and Cooperative Education

Typical Job Titles

Entry-Level and Junior Positions Accessible to Graduates

The roles listed below represent typical first professional roles or junior-level pathways for graduates, depending on the employer, prior internship/co-op experience, certifications, and demonstrated technical skills.

SOC Operator / SOC Analyst

Cybersecurity Auditor

Incident Responder

Security Awareness Specialist

Digital Forensics Analyst

Threat Intelligence Analyst

Risk Analyst

Information Security Analyst

Network Security Engineer

DevSecOps Engineer

Application Security Engineer

Junior GRC Analyst

Cloud Security Specialist

Security Consultant

IAM Specialist

Penetration Tester

Advanced Career Paths

SOC Manager                                         

Security Architect

GRC Consultant

Chief Information Security Officer (CISO)
Data Privacy Officer  

Minimum 800 hours of work experience 

What’s different about an RIT Croatia education? It’s the valuable career experience you gain through cooperative education—connecting with leading companies across various industries. You’ll earn more than a degree. You’ll gain real-world career experience that sets you apart. 

The program is focused on hands-on experience from Day 1; therefore, students are required to complete a minimum of 800 hours of cooperative education (co-op) or internship placements. This provides students with valuable professional experience and gives them a competitive advantage in launching their careers. At RIT Croatia, students take the lead in securing their co-ops, while we provide strong industry connections through classroom engagement and events. Our students gain experience with both local and internationally renowned companies, learning about cybersecurity from top professionals.

Co-op is usually completed in the summer following sophomore and junior years. Co-op is planned, monitored, and evaluated by the student, the co-op counselor, and the employing firm. 

Industries

Electronic and Computer Hardware

Government (Local, State, Federal)

Health Care

Internet and Software

Medical Devices

Telecommunications

Utilities and Renewable Energy

Curriculum

View Printable Curriculum

Cybersecurity BS

Course Sem. Cr. Hrs.
First Year
CSEC-140
Introduction to Cybersecurity
This course will introduce many fundamental cybersecurity concepts. The course will teach students to think about information systems using an adversarial mindset, evaluate risk to information systems, and introduce controls that can be implemented to reduce risk. Topics will include authentication systems, data security and encryption, risk management and security regulatory frameworks, networking and system security, application security, organizational and human security considerations, and societal implications of cybersecurity issues. These topics will be discussed at an introductory level with a focus on applied learning through hands-on virtual lab exercises.
3
GCIS -123
Software Development and Problem Solving I
A first course introducing students to the fundamentals of computational problem-solving. Students will learn a systematic approach to problem-solving, including how to frame a problem in computational terms, how to decompose larger problems into smaller components, how to implement innovative software solutions using a contemporary programming language, how to critically debug their solutions, and how to assess the adequacy of the software solution. Additional topics include an introduction to object-oriented programming and data structures such as arrays and stacks. Students will complete both in-class and out-of-class assignments.
4
MATH-181
Project Based Calculus I
This is the first in a two-course sequence intended for students majoring in mathematics, science, or engineering.  It emphasizes the understanding of concepts, and using them to solve physical problems.  The course covers functions, limits, continuity, the derivative, rules of differentiation, applications of the derivative, Riemann sums, definite integrals, and indefinite integrals.
3
PSYC-101
General Education-Social Perspective: Introduction to Psychology
Introduction to the field of psychology. Provides a survey of basic concepts, theories, and research methods. Topics include: thinking critically with psychological science; neuroscience and behavior; sensation and perception; learning; memory; thinking, language, and intelligence; motivation and emotion; personality; psychological disorders and therapy; and social psychology.
 3
UWRT-100
General Education Elective: Critical Reading and Writing
This course is designed to help students develop the literacy practices they will need to be successful in their First-Year Writing course. Students will read, understand, interpret, and synthesize a variety of texts. Assignments are designed to challenge students intellectually, culturally and rhetorically. Through inquiry-based assignment sequences, students will improve their writing by developing academic research and literacy practices that will be further strengthened in First-Year Writing. Particular attention will be given to critical reading, academic writing conventions, and revision. Small class size promotes frequent student-instructor and student-student interaction. The course also emphasizes the principles of intellectual property and academic integrity in academic writing.
 3
GCIS -124
Software Development and Problem Solving II
A second course that delves further into computational problem solving, now with a focus on an object-oriented perspective. There is a continued emphasis on basic software design, testing & verification, and incremental development. Key topics include theoretical abstractions such as classes, objects, encapsulation, inheritance, interfaces, polymorphism, software design comprising multiple classes with UML, data structures (e.g. lists, trees, sets, maps, and graphs), exception/error handling, I/O including files and networking, concurrency, and graphical user interfaces. Additional topics include basic software design principles (coupling, cohesion, information expert, open-closed principle, etc.), test driven development, design patterns, data integrity, and data security.
4
NSSA-241
Introduction to Routing and Switching
This course provides an introduction to wired network infrastructures, topologies, technologies, and the protocols required for effective end-to-end communication.   Basic security concepts for TCP/IP based technologies are introduced.   Networking layers 1, 2, and 3 are examined in-depth using the International Standards Organization’s Open Systems Interconnection and TCP/IP models as reference.  Course topics focus on the TCP/IP protocol suite, the Ethernet LAN protocol, switching technology, and routed and routing protocols common in TCP/IP networks. The lab assignments mirror the lecture content , providing an experiential learning component for each topic covered.
3
MATH-182
Project Based Calculus II
This is the second in a two-course sequence.  It emphasizes the understanding of concepts, and using them to solve physical problems.  The course covers techniques of integration including integration by parts, partial fractions, improper integrals, applications of integration, representing functions by infinite series,
3
MATH-190
Discrete Mathematics for Computing
This course introduces students to ideas and techniques from discrete mathematics that are widely used in Computer Science. Students will learn about the fundamentals of propositional and predicate calculus, set theory, relations, recursive structures and counting. This course will help increase students’ mathematical sophistication and their ability to handle abstract problems.
3
UWRT-150
General Education Elective; Writing Intensive: FYW: Writing Seminar
Writing Seminar is a three-credit course limited to 19 students per section. The course is designed to develop first-year students’ proficiency in analytical and rhetorical reading and writing, and critical thinking. Students will read, understand, and interpret a variety of non-fiction texts representing different cultural perspectives and/or academic disciplines. These texts are designed to challenge students intellectually and to stimulate their writing for a variety of contexts and purposes. Through inquiry-based assignment sequences, students will develop academic research and literacy practices that will be further strengthened throughout their academic careers. Particular attention will be given to the writing process, including an emphasis on teacher-student conferencing, critical self-assessment, class discussion, peer review, formal and informal writing, research, and revision. Small class size promotes frequent student-instructor and student-student interaction. The course also emphasizes the principles of intellectual property and academic integrity for both current academic and future professional writing.
 3
Second Year
CSEC-201
Programming for Information Security
This course builds upon basic programming skills to give students the programming knowledge necessary to study computing security. Students will be introduced to network programming, memory management, and operating system calls along with associated security concepts. Specific focus will placed on understanding the compilation process and on the relation between high-level programming concepts and low-level programming concepts, culminating in identifying and exploiting memory corruption vulnerabilities.
3
NSSA-221
Systems Administration I
This course is designed to give students an understanding of the role of the system administrator in large organizations.  This will be accomplished through a discussion of many of the tasks and tools of system administration.  Students will participate in both a lecture section and a separate lab section.  The technologies discussed in this class include: operating systems, system security, and service deployment strategies.
3
ENVS-151
General Education - Scientific Principles Perspective,Scientific Inquiry in Environmental Science
This course is part of a two-semester course that combines an integrated approach to interconnected, interdisciplinary principles of environmental science through case studies, site visits and fieldwork. Through the given literature, discussion at lectures and case studies dealing with global environmental problems, as well as environmental problems related to the Dalmatian coast, students will learn how to critically analyze environmental problems from a multidisciplinary perspective and propose solutions.
 4
MATH-251
Probability and Statistics I
This course introduces sample spaces and events, axioms of probability, counting techniques, conditional probability and independence, distributions of discrete and continuous random variables, joint distributions (discrete and continuous), the central limit theorem, descriptive statistics, interval estimation, and applications of probability and statistics to real-world problems. A statistical package such as Minitab or R is used for data analysis and statistical applications.    
3
CSEC-202
Reverse Engineering Fundamentals
This course will teach students the core concepts needed to analyze unknown source code. Students will study a variety of low-level programming languages and how high-level programming language structures relate to low-level programming languages. Students will learn study tools and techniques used for both static and dynamic analysis of unknown binaries, providing the foundation for further study in malware analysis.  
2
NSSA-245
Network Services
This course will investigate the protocols used to support network based services and the tasks involved in configuring and administering those services in virtualized Linux and Windows internet working environments. Topics include an overview of the TCP/IP protocol suite, in-depth discussions of the transport layer protocols, TCP and UDP, administration of network based services including the Dynamic Host Configuration Protocol (DHCP), Domain Name Service (DNS), Secure Shell (SSH), and Voice Over IP (VoIP).  Students completing this course will have   thorough theoretical knowledge of the Internet Protocol (IP), the Transport Control Protocol (TCP), and the User Datagram Protocol (UDP), as well as experience in administering, monitoring, securing and troubleshooting an internet work of computer systems running these protocols and services.
2
STAT-257
Statistical Inference
Learn how data furthers understanding of science and engineering. This course covers basic statistical concepts, sampling theory, hypothesis testing, confidence intervals, point estimation, and simple linear regression. A statistical software package such as MINITAB will be used for data analysis and statistical applications.
3
PHIL-102
Introduction to Moral Issues
This course examines ethical questions that arise in the course of day-to-day individual and social life. Some consideration will be given to ethical theory and its application to such questions, but emphasis will be on basic moral questions and practical issues. Examples of typical issues to be examined are: What are the grounds for moral obligations like keeping promises or obeying the law? How do we reason about what to do? Examples of typical moral issues that may be introduced are capital punishment, euthanasia, abortion, corporate responsibility, the treatment of animals, and so forth.
3
HSPT-499
Co-op (summer)
Career-related work experience. Employment within the food, hospitality or tourism service management industries is monitored by the Hospitality and Service Management Program and the Office of Cooperative Education and Career Services. Coop work is designed for the student to experience progressive training on the job as related to the academic option. Sophomores begin co-op the summer following their second-year studies. Graduation requirement: 2 coops. Department permission is required. (Academic Level 2 thru 4, Degree Seeking students.) CO OP (Fall, Spring, Summer).
 0
General Education - Immersion I 3
General Education - Global Perspective
Third Year
CSCI-462
Introduction to Cryptography
This course provides an introduction to cryptography, its mathematical foundations, and its relation to security. It covers classical cryptosystems, private-key cryptosystems (including DES and AES), hashing and public-key cryptosystems (including RSA). The course also provides an introduction to data integrity and authentication.  Students cannot take and receive credit for this course if they have credit for CSCI-662.
3
CSEC-310
Endpoint Security Engineering
This course will discuss cybersecurity defensive measures and their application to protecting computing endpoints. The course will focus on studying, analyzing, and understanding vulnerabilities and threats along with the preventative and detective controls necessary to mitigate risk. Defensive endpoint-based controls will be explored and applied with hands-on exercises.
3
ISTE-230
Introduction to Database and Data Modeling
A presentation of the fundamental concepts and theories used in organizing and structuring data. Coverage includes the data modeling process, basic relational model, normalization theory, relational algebra, and mapping a data model into a database schema. Structured Query Language is used to illustrate the translation of a data model to physical data organization. Modeling and programming assignments will be required. Note: students should have one course in object-oriented programming. (Prerequisites: ISTE-120. Lec/Lab Spring).
 3
CSEC-472
Authentication and Security Models
Access control and authentication systems are some of the most critical components of cybersecurity ecosystems. This course covers the theory, design, and implementation of systems used in identification, authentication, authorization, and accountability processes with a focus on trust at each layer. Students will examine formal models of access control systems and approaches to system accreditation, the application of cryptography to authentication systems, and the implementation of IAAA principles in modern operating systems. A special focus will be placed on preparing students to research and write about future topics in this area.
2
CSEC-380
Principles of Web Application Security
This course is designed to give students a foundation in the theories and practice relating to web application security. The course will introduce students to the concepts associated with deploying and securing a typical HTTP environment as well as defensive techniques they may employ.
3
CSCI-532
Introduction to Intelligent Security Systems
The course will introduce students to the application of intelligent methodologies in computer security and information assurance systems design. It will review different application areas such as intrusion detection and monitoring systems, access control and biological authentication, firewall structure and design. The students will be required to implement a course project on design of a particular security tool with an application of an artificial intelligence methodology and to undertake its performance analysis.  Students cannot take and receive credit for this course if they have credit for CSCI-735.
3
ENVS-250
Applications of Geographic Information Systems
Through hands-on projects and case studies, this course illustrates concepts and applications of raster and vector geographic information systems (GIS) in a variety of disciplines, such as environmental science, biology, geology, geography, sociology, and economics.  Students will learn how to use GIS software and spatial analyses, plan a project, create a database, and conduct an independent project.  Students should have completed a foundational course in their major and be comfortable working with computers.  Experience with programming is also useful. (Foundational course in student's major field of study or permission of instructor).
4
General Education - Immersion I
General Education - Global Perspective
Fourth Year
PUBL-363
Cyber Security Policy and Law
Why are we still so bad at protecting computer systems? Is it because we don’t have good enough technology? Or because we lack sufficient economic incentives to implement that technology? Or because we implement technologies but then fail to use them correctly? Or because the laws governing computer security are so outdated? Or because our legal frameworks are ill-equipped to deal with an international threat landscape? All these reasons—and others— have been offered to explain why we seem to see more and more large-scale cybersecurity incidents and show no signs of getting better at preventing them. This course will examine the non-technical dimensions of this problem—the laws and other policy measures that govern computer security threats and incidents. We will focus primarily on U.S. policy but will also discuss relevant policies in the E.U. and China, as well as international tensions and norms. The central themes of the course will be the ways in which technical challenges in security can be influenced by the social, political, economic, and legal landscapes, and what it means to protect against cybersecurity threats not just by writing better code but also by writing better policies and laws.
3
CSEC-468
Risk Management for Information Security
The three key elements of risk management will be introduced and explored. These are risk analysis, risk assessment, and vulnerability assessment. Both quantitative and qualitative methodologies will be discussed as well as how security metrics can be modeled, monitored, and controlled. Several case studies will be used to demonstrate the risk management principles featured throughout the course. Students will work in teams to conduct risk assessments on the selected case study scenarios. They will develop mitigation plans and present the results of their analysis both in written reports and oral presentations.
3
CSEC-520
Cyber Analytics and Machine Learning
The course provides students an opportunity to explore methods and applications in cyber analytics with advanced machine learning algorithms including deep learning. Students will learn how to use machine learning methods to solve cybersecurity problems such as network security, anomaly detection, malware analysis, etc. Students will also learn basic concepts and algorithms in machine learning such as clustering, neural networks, adversarial machine learning, etc.  Students taking this course should have the 4th year status and completed MATH-190 Discrete Math, MATH-251 Probability and Statistics I, and MATH-241 Linear Algebra.
3
CSEC-462
Network Security and Forensics
This course investigates the many facets of network security and forensics.  Students will examine the areas of intrusion detection, evidence collection, network auditing, network security policy design and implementation as well as preparation for and defense against attacks. The issues and facilities available to both the intruder and data network administrator will be examined and evaluated with appropriate laboratory exercises to illustrate their effect.
3
CSEC-490
Capstone in Cybersecurity
This is a capstone course for students in the cybersecurity program. Students will review a series of short modules on topics such as teamwork, project management, report writing, and presentations, and will work in teams to apply their knowledge and skills to real-world projects in various areas of cybersecurity. Projects may require performing security analysis of systems, networks, software, policies, etc., devising and implementing security solutions in real-world applications. (4th-year status and departmental approval).
3
CSEC-473
Cyber Defense Techniques
Students will study, build, defend and test the security of computer systems and networking infrastructure while potentially under attack.  Students will gain an understanding of standard business operations, timelines and the value of risk and project management. Techniques as related to security guidelines and goals will be studied.  Aspects of legal requirements, inheriting existing infrastructure, techniques for backup and recovery of data and systems will be examined
3
CSCI-622
Data Security and Privacy
This course examines policies, methods and mechanisms for securing enterprise and personal data and ensuring data privacy.  Topics include data integrity and confidentiality; access control models; secure database architectures; secure transaction processing; information flow, aggregation, and inference controls; auditing; securing data in contemporary (relational, XML and other NO SQL) database systems; data privacy; and legal and ethical issues in data protection. Programming projects are required.
3
Open Elective I 3
Open Elective II 3
Open Elective III 3

Admission Process

Learn about RIT Croatia's admission process

Faculty

Prikaži imenik  

Internationally recognized diplomas and high educational standards

Upon completion of the program, students will be granted two diplomas, an international American Bachelor of Science (BS) degree in Cybersecurity, awarded by Rochester Institute of Technology, and a Croatian degree from RIT Croatia with the degree title prvostupnik/prvostupnica (baccalaureus/ baccalaurea) inženjer/inženjerka kibernetičke sigurnosti for the Cybersecurity program, earning 240 ECTS points. Dual degrees provide additional opportunities for our graduates and increase their chances of employment throughout the European Union and the world.

Programs and curriculum at RIT Croatia are fully aligned with the high standards of education at Rochester Institute of Technology*.  

*Rochester Institute of Technology is accredited by the Middle States Commission on Higher Education, 3624 Market Street, Philadelphia, PA 19104(267-284-5000). The Middle States Commission on Higher Education is an institutional accrediting agency recognized by the U.S. Secretary of Education and the Council for Higher Education Accreditation.